Michael Douglass

Leads a team of individuals focused on partner management, cyber threat intelligence, and operational coordination. Research cyber events and threat actors such as ransomware groups, APTs, and other various threat actors that are actively exploiting vulnerabilities within critical infrastructure. Supports customer operations with mission partners and OEMs to aid intelligence collection as well as mitigate any cyber threat activity. Sets up meetings to train other team members on various platforms and tools to enhance the overal ability of the team. Utilizes tools such as VirusTotal, CrowdStrike, Mandiant, Looking Glass, DomainTools, and many others to complete analysis requirements for the customers mission. Triage and research IP addresses, hashes, domains, and other indicators of compromise (IoCs) for attribution of malicious actors and to assess relevance when sharing IoCs to partners.

Research cyber events and threat actors such as ransomware groups, APTs, and other various threat actors that are actively exploiting vulnerabilities within critical infrastructure. Supports customer operations with mission partners and OEMs to aid intelligence collection as well as mitigate any cyber threat activity. Sets up meetings to train other team members on various platforms and tools to enhance the overal ability of the team. Utilizes tools such as VirusTotal, CrowdStrike, Mandiant, Looking Glass, DomainTools, and many others to complete analysis requirements for the customers mission. Triage and research IP addresses, hashes, domains, and other indicators of compromise (IoCs) for attribution of malicious actors and to assess relevance when sharing IoCs to partners.

Research new and emerging malware, spyware, ransomware, adware, and viruses. Writes reports about cyber events and threat actors such as ransomware gangs, APTs, and other various threat actors that are actively exploiting vulnerabilities within critical infrastructure. Supports customer operations with mission partners and OEMs to aid intelligence collection assets. Trains new hire personnel on processes and intelligence collection techniques. Utilizes tools such as VirusTotal, Jira, Looking Glass, and Kibana to complete analysis requirements for the customers mission. Research IP addresses, hashes, and other indicators of compromise (IoCs) for attribution of malicious actors.

Resolved real-time network, software, and hardware anomalies as they occur on a tactical ground processing system. Utilized Linux, Unix, Solaris, and Windows command lines as well as system tools to preform critical tasks preventing total mission failure. Supported customer operations with mission partners and OEMs to aid intelligence collection assets. Trained new hire personnel. Created new ways of streamlining tasks saving time and minimizing errors on projects across the team.

Provided all-source intelligence analysis and assessments pertaining to the cyberspace domain. Cognizance of overall cyberspace trends, analysis and operations related to computer network defense within the DOD and national level communities. Created new organizational processes to further analysis to support the customers’ needs when it comes to trend analysis as well as attribution. Research new and emerging APT groups along with new TTP’s.

Created timely and thorough reports that would be briefed to key leaders in the decision-making process to allocate resources and targeting. Assessed potential threats through supply chains and personnel to mitigate the threat of insider threats and loss of confidence in systems and emerging technologies. Stayed up to date on all tools available within the IC to get maximum coverage on high level threats. Responsible for operations within the Mission Command Center.

Assessed the risk within government and corporate supply chains for components, devices, and programs for potential threat. Mitigated risks within supply chains through updated security measures preventing loss of confidence in assets. Assumed the duties of the core subject matter expert (SME) in intelligence analysis and production in a variety of large complex data topics related to various threats to national security and strategic assets. Use public domain intelligence and contribute finished (all-source/fused) intelligence to gain maximum understanding of all assessed targets. Responsible for researching, reviewing, editing, planning, preparing, integrating, and publishing all-source terrorism and foreign intelligence service intelligence studies, plans, and/or products relating to specific programs. Traveled several times per year (CONUS and OCONUS) and brief partners on a continual basis. Researched network topology and discovered networks through untraditional means to map further for analysis.

Compiled secondary imagery intelligence products for use in briefings to high-level government officials including senior decision makers within the Intelligence Community and Federal Government. Created geospatial intelligence products derived from all source means to help members of the Intelligence Community and high-level members of the US government make decisions to support the Global War on Terror. Completed detailed analysis through all source methods to produce products for release within the Intelligence Community. Read recent reporting and used all source tools to analyzed metadata to target threat networks. Used access to SAPs to further analysis in the production of products. Created products from geospatial SIGINT metadata.

Provided full-motion video (FMV) and imagery analysis in support of the Global War on Terror. Compiled secondary imagery intelligence products for use in briefings to high-level government officials including senior decision makers within the Intelligence Community and Federal Government. Responsible for exploiting both FMV, national technical means (NTM), and Ground Moving Target Indicator (GMTI) imagery in a 24/7, 365 day work environment within a multi-agency Special Access Program in support of the Global War on Terror. Completed all-source intelligence products with minimal to no errors.

Provided full-motion video (FMV) and imagery analysis in support of the Global War on Terror. Compiled secondary imagery intelligence products for use in briefings to high-level government officials including senior decision makers within the Intelligence Community and Federal Government. Responsible for exploiting both FMV, national technical means (NTM), and Ground Moving Target Indicator (GMTI) imagery in a 24/7, 365 day work environment within a multi-agency Special Access Program in support of the Global War on Terror. Completed all-source intelligence products with minimal to no errors.